$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3f04eb66-22f0-392c-ad26-4587e32b4eec.roa File: 3f04eb66-22f0-392c-ad26-4587e32b4eec.roa (raw, json) Hash identifier: SOKqSACo+4vwoJbNQhixZl5JfcYfTgFLRZag+ZXxlJ4= Subject key identifier: 04:53:60:AA:D1:2C:C1:8E:C5:CC:DC:7D:48:C9:09:9E:2E:8D:95:57 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D35FA77A5654A321EC80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3f04eb66-22f0-392c-ad26-4587e32b4eec.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 64.16.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d3:5f:a7:7a:56:54:a3:21:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=4ef06fd2-2101-4908-b81c-7351838e2f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:bd:7f:aa:7b:57:a1:5a:79:97:41:8b:7a: 8b:6a:c6:3a:b2:ac:61:cc:3e:bb:ae:22:8d:19:42: 80:26:d3:d7:10:22:cc:23:8e:72:8b:d8:16:a2:04: 23:26:87:f7:4b:39:e6:97:a4:d9:17:d7:3d:79:8e: e0:92:36:2b:d3:5f:b2:c9:6e:97:79:7d:9d:cb:54: 39:4c:e0:aa:f3:f1:35:8d:6d:61:fa:ae:6c:e9:89: e4:fe:9f:46:bf:45:f5:6e:4a:cc:58:82:5e:07:f8: c1:bd:47:5c:ed:1a:37:ce:2b:00:d5:e6:d7:b3:1f: e1:07:2d:22:97:25:3e:48:32:47:e9:84:ce:d1:ab: 78:d1:cf:7c:07:e8:10:f6:d9:4a:b4:3d:bb:04:72: 73:01:e2:ec:fa:ea:94:59:5b:10:70:6d:d2:4b:f9: 9b:6a:a2:c8:ad:a0:98:db:43:a4:ac:23:ac:53:fe: 0b:fe:42:e3:a7:ad:ac:7c:3a:83:83:54:3b:3e:ac: 07:74:23:7f:33:d4:eb:01:32:69:dc:85:3d:7d:87: 15:09:25:d3:28:3f:d7:76:b3:0a:1d:61:8c:96:d1: b3:39:7b:1d:23:1f:1f:5a:0c:67:96:1d:7e:2d:e0: 0f:9d:11:5b:00:54:bc:c0:14:0d:40:a4:93:6c:70: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:53:60:AA:D1:2C:C1:8E:C5:CC:DC:7D:48:C9:09:9E:2E:8D:95:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3f04eb66-22f0-392c-ad26-4587e32b4eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e2:eb:3b:bb:54:8a:9f:bd:75:30:08:b4:65:b0:99:c9:30: 78:be:9a:e7:26:b8:89:5b:6b:cc:49:1b:ab:93:eb:5d:0a:99: 74:0a:14:40:9c:b6:7f:6c:41:29:06:d3:76:a5:0d:16:c9:f4: 57:bf:dc:c8:d2:dd:71:00:3e:3e:5f:9c:1a:07:89:ef:f7:95: 4c:16:4c:76:f4:9a:93:14:57:6e:d3:93:ca:70:c0:fe:e4:16: 4b:3a:38:09:4d:8a:bc:39:6e:d7:9e:23:36:e9:f5:f0:cd:61: 98:a5:1e:94:5f:2b:19:0c:46:25:b0:c3:8c:41:32:13:77:21: 29:bb:35:da:ae:14:3f:3b:0d:72:0a:b8:91:f5:9c:74:2c:09: e9:f4:24:b6:7b:9a:8e:d8:3a:7e:07:44:cb:1a:5b:92:42:3f: bd:0b:46:b7:c5:14:4b:9e:02:e4:2a:7f:47:41:08:93:51:ca: 4f:ff:9a:54:93:21:86:da:b0:55:25:97:18:80:df:a3:f8:e0: 2e:8e:c2:97:cc:6f:8e:92:d6:15:67:f1:64:b4:58:c1:b3:95: 12:95:36:67:33:71:d1:dc:ce:f9:21:cc:76:5f:a5:7b:8f:be: 4a:86:f6:c9:6e:da:90:5c:94:87:a3:f0:bd:0b:0f:8e:38:f9: ca:f5:9b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNNfp3pWVKMh7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NGVmMDZmZDItMjEwMS00OTA4LWI4MWMtNzM1MTgzOGUyZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorq9f6p7V6FaeZdBi3qLasY6sqxhzD67riKN GUKAJtPXECLMI45yi9gWogQjJof3Sznml6TZF9c9eY7gkjYr01+yyW6XeX2dy1Q5 TOCq8/E1jW1h+q5s6Ynk/p9Gv0X1bkrMWIJeB/jBvUdc7Ro3zisA1ebXsx/hBy0i lyU+SDJH6YTO0at40c98B+gQ9tlKtD27BHJzAeLs+uqUWVsQcG3SS/mbaqLIraCY 20OkrCOsU/4L/kLjp62sfDqDg1Q7PqwHdCN/M9TrATJp3IU9fYcVCSXTKD/XdrMK HWGMltGzOXsdIx8fWgxnlh1+LeAPnRFbAFS8wBQNQKSTbHBZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARTYKrRLMGOxczcfUjJCZ4ujZVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvM2YwNGViNjYtMjJmMC0z OTJjLWFkMjYtNDU4N2UzMmI0ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBClMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7i6zu7VIqfvXUwCLRlsJnJMHi+mucmuIlba8xJG6uT610KmXQKFECc tn9sQSkG03alDRbJ9Fe/3MjS3XEAPj5fnBoHie/3lUwWTHb0mpMUV27Tk8pwwP7k Fks6OAlNirw5bteeIzbp9fDNYZilHpRfKxkMRiWww4xBMhN3ISm7NdquFD87DXIK uJH1nHQsCen0JLZ7mo7YOn4HRMsaW5JCP70LRrfFFEueAuQqf0dBCJNRyk//mlST IYbasFUllxiA36P44C6OwpfMb46S1hVn8WS0WMGzlRKVNmczcdHczvkhzHZfpXuP vkqG9slu2pBclIej8L0LD444+cr1mys= -----END CERTIFICATE-----Generated at Sat Jul 18 01:18:29 2026 by rpki-client